spawnfile 0.1.25 → 0.1.28

package/dist/runtime/daimon/engineDescriptorSchema.js

@@ -0,0 +1,107 @@
+import { z } from "zod";
+import { DAIMON_V5_ENGINE_DESCRIPTORS } from "./engineDescriptors.generated.js";
+import { SpawnfileError } from "../../shared/errors.js";
+/** Published broker/realm ABIs are closed; engine identities are extensible. */
+const literalDataSchema = (value) => {
+    if (value === null)
+        return z.null();
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        return z.literal(value);
+    if (Array.isArray(value))
+        return z.tuple(value.map(literalDataSchema));
+    if (typeof value !== "object" || !value)
+        throw new Error("Non-JSON descriptor contract");
+    return z.strictObject(Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, literalDataSchema(entry)])));
+};
+const pinned = Object.values(DAIMON_V5_ENGINE_DESCRIPTORS);
+export const DAIMON_PINNED_BROKER_DESCRIPTOR = pinned.find((entry) => entry.broker !== null);
+export const DAIMON_PINNED_PORTABLE_DESCRIPTOR = pinned.find((entry) => entry.auth.staging === "portable-file");
+export const DAIMON_PINNED_SECRET_SERVICE_DESCRIPTOR = pinned.find((entry) => entry.auth.staging === "secret-service");
+const nonblank = z.string().min(1).max(4096).regex(/\S/u);
+const identifier = z.string().regex(/^[a-z][a-z0-9-]*$/u).max(128);
+const relativePath = nonblank.refine((value) => !value.startsWith("/") && !value.split("/").some((part) => part === ".." || part === "." || !part));
+const environmentName = z.string().regex(/^[A-Z_][A-Z0-9_]*$/u);
+const credential = z.strictObject({
+    destinationRelativePath: relativePath, sourceSlot: identifier.optional(), sourceRelativePath: relativePath.optional(),
+    directoryMode: z.literal(0o700).optional(), fileMode: z.literal(0o600).optional()
+});
+const format = z.strictObject({
+    containerKey: nonblank.optional(), fallbackToRoot: z.boolean().optional(), entryKeyPattern: nonblank.optional(),
+    accessTokenKeys: z.array(nonblank).min(1), refreshTokenKeys: z.array(nonblank).min(1), expiresAtKey: nonblank.optional()
+});
+const fileAuth = {
+    method: nonblank, provider: nonblank, fileName: relativePath,
+    maxCredentialBytes: z.number().int().positive().max(1_048_576), directoryMode: z.literal(0o700), fileMode: z.literal(0o600), format
+};
+const auth = z.discriminatedUnion("staging", [
+    z.strictObject({ ...fileAuth, staging: z.literal("portable-file"), realm: z.null() }),
+    z.strictObject({ ...fileAuth, staging: z.literal("broker-realm"), realm: literalDataSchema(DAIMON_PINNED_BROKER_DESCRIPTOR.auth.realm) }),
+    z.strictObject({ staging: z.literal("secret-service"), method: z.null(), provider: z.null(),
+        realm: literalDataSchema(DAIMON_PINNED_SECRET_SERVICE_DESCRIPTOR.auth.realm), busEnvironment: environmentName, format: z.null() })
+]);
+const sandbox = z.strictObject({
+    configurable: z.boolean(),
+    policy: z.strictObject({ mode: z.literal("workspace-write"), networkAccess: z.literal(false), webSearch: z.literal("disabled") }).optional(),
+    profile: nonblank.optional(), baseProfile: nonblank.optional(), restrictNetwork: z.boolean().optional(),
+    denyPaths: z.strictObject({ canonicalAbsolute: z.boolean(), rootAllowed: z.boolean(), trailingSlashAllowed: z.boolean(), forbiddenCharacterPattern: nonblank }).optional()
+});
+export const daimonEngineDescriptorSchema = z.strictObject({
+    id: identifier, authKinds: z.array(nonblank).min(1), auth, credentialMaterial: credential.nullable(),
+    piAuthMethod: nonblank.optional(), piProvider: nonblank.optional(), piSourceProvider: nonblank.optional(),
+    homeDirectory: z.union([z.literal(""), relativePath]), homeEnvironment: environmentName,
+    requiredBinaries: z.array(identifier).min(1),
+    modelSelection: z.strictObject({
+        configurable: z.boolean(), models: z.union([z.strictObject({ kind: z.literal("non-empty-string") }), z.strictObject({ kind: z.literal("enum"), values: z.array(nonblank).min(1) }), z.null()]),
+        reasoningEfforts: z.array(nonblank), defaults: z.strictObject({ model: nonblank.nullable(), reasoningEffort: nonblank.nullable() }),
+        requiresPairedDeclaration: z.boolean(), declarationRequiresBroker: z.boolean()
+    }),
+    sandbox,
+    training: z.strictObject({
+        subject: z.discriminatedUnion("supported", [
+            z.strictObject({ supported: z.literal(true), isolation: z.enum(["native-sandbox", "broker-worker"]) }),
+            z.strictObject({ supported: z.literal(false), isolation: z.null(), reason: nonblank })
+        ]),
+        inferenceGrants: literalDataSchema(DAIMON_PINNED_BROKER_DESCRIPTOR.training.inferenceGrants).nullable()
+    }),
+    broker: literalDataSchema(DAIMON_PINNED_BROKER_DESCRIPTOR.broker).nullable(),
+    capabilities: z.strictObject({ portableCredential: z.boolean(), nativeSandbox: z.boolean(), broker: z.boolean(), secretService: z.boolean() })
+});
+export const daimonEngineDescriptorsSchema = z.record(identifier, daimonEngineDescriptorSchema);
+const brokerSandboxSchema = literalDataSchema(DAIMON_PINNED_BROKER_DESCRIPTOR.sandbox);
+/** Cross-field relationships are checked separately so JSON Schema stays portable. */
+export const parseDaimonEngineDescriptors = (value) => {
+    const result = daimonEngineDescriptorsSchema.safeParse(value);
+    const fail = () => { throw new SpawnfileError("runtime_error", "Daimon runtime contract manifest has invalid engines descriptors"); };
+    if (!result.success || Object.keys(result.data).length === 0)
+        return fail();
+    for (const [id, descriptor] of Object.entries(result.data)) {
+        const { auth, broker, capabilities, credentialMaterial, modelSelection: selection, training, sandbox } = descriptor;
+        if (id !== descriptor.id || capabilities.broker !== (broker !== null)
+            || capabilities.secretService !== (auth.staging === "secret-service")
+            || capabilities.portableCredential !== (auth.staging !== "secret-service")
+            || (auth.staging === "broker-realm") !== (broker !== null)
+            || (auth.staging === "portable-file" && (!credentialMaterial?.sourceSlot || !credentialMaterial.sourceRelativePath || credentialMaterial.directoryMode !== auth.directoryMode || credentialMaterial.fileMode !== auth.fileMode))
+            || (auth.staging === "secret-service" && credentialMaterial !== null)
+            || (auth.staging === "broker-realm" && credentialMaterial?.destinationRelativePath !== auth.realm.agentCredentialRelativePath)
+            || (selection.declarationRequiresBroker && broker === null)
+            || (broker !== null && (selection.models?.kind !== "enum"
+                || JSON.stringify(selection.models.values) !== JSON.stringify(broker.worker.models)
+                || JSON.stringify(selection.reasoningEfforts) !== JSON.stringify(broker.worker.reasoningEfforts)))
+            || (broker !== null && !brokerSandboxSchema.safeParse(sandbox).success)
+            || (!selection.configurable && (selection.models !== null || selection.reasoningEfforts.length !== 0))
+            || (selection.defaults.model !== null && (selection.models === null || (selection.models.kind === "enum" && !selection.models.values.includes(selection.defaults.model))))
+            || (selection.defaults.reasoningEffort !== null && !selection.reasoningEfforts.includes(selection.defaults.reasoningEffort))
+            || (training.subject.supported && (!capabilities.nativeSandbox || (training.subject.isolation === "broker-worker" && broker === null))))
+            return fail();
+        if (auth.staging !== "secret-service" && auth.format.entryKeyPattern) {
+            try {
+                new RegExp(auth.format.entryKeyPattern, "u");
+            }
+            catch {
+                return fail();
+            }
+        }
+    }
+    return result.data;
+};
+//# sourceMappingURL=engineDescriptorSchema.js.map

package/dist/runtime/daimon/engineDescriptorSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engineDescriptorSchema.js","sourceRoot":"","sources":["../../../src/runtime/daimon/engineDescriptorSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAa,EAAE;IACtD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAgC,CAAC,CAAC;IACtG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzF,OAAO,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1H,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAA+D,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAE,CAAC;AAC3J,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAmF,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,eAAe,CAAE,CAAC;AAClM,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAoF,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAE,CAAC;AAG1M,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC1D,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACpJ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAChE,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IAChC,uBAAuB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE;IACrH,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAClF,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5B,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC/G,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE;CACzH,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY;IAC5D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM;CACpI,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IAC3C,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAiE,EAAE,CAAC;IACzM,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;QACzF,KAAK,EAAE,iBAAiB,CAAC,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAyE,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;CAC7M,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5I,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvG,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3K,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACpG,YAAY,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE;IACzG,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,eAAe,EAAE,eAAe;IACvF,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC;QAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9L,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnI,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE;KAC/E,CAAC;IACF,OAAO;IACP,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;YACzC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;YACtG,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SACvF,CAAC;QACF,eAAe,EAAG,iBAAiB,CAAC,+BAA+B,CAAC,QAAQ,CAAC,eAAe,CAAgF,CAAC,QAAQ,EAAE;KACxL,CAAC;IACF,MAAM,EAAG,iBAAiB,CAAC,+BAA+B,CAAC,MAAM,CAAmC,CAAC,QAAQ,EAAE;IAC/G,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CAC/I,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;AAChG,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;AAEvF,sFAAsF;AACtF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,KAAc,EAA2B,EAAE;IACtF,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,kEAAkE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QACpH,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;eAChE,YAAY,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC;eAClE,YAAY,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC;eACvE,CAAC,IAAI,CAAC,OAAO,KAAK,cAAc,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;eACvD,CAAC,IAAI,CAAC,OAAO,KAAK,eAAe,IAAI,CAAC,CAAC,kBAAkB,EAAE,UAAU,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,IAAI,kBAAkB,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;eAC7N,CAAC,IAAI,CAAC,OAAO,KAAK,gBAAgB,IAAI,kBAAkB,KAAK,IAAI,CAAC;eAClE,CAAC,IAAI,CAAC,OAAO,KAAK,cAAc,IAAI,kBAAkB,EAAE,uBAAuB,KAAK,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC;eAC3H,CAAC,SAAS,CAAC,yBAAyB,IAAI,MAAM,KAAK,IAAI,CAAC;eACxD,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM;mBACpD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;mBAChF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;eACjG,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;eACpE,CAAC,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;eACnG,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;eACvK,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;eACzH,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,eAAe,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACzJ,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACrE,IAAI,CAAC;gBAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;YAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC,CAAC"}

package/dist/runtime/daimon/engineDescriptors.generated.d.ts

@@ -0,0 +1,477 @@
+export declare const DAIMON_ENGINE_DESCRIPTOR_SOURCE_COMMIT: "5e8bffc10779838e3ff0b6687de06db6b6fde02a";
+export declare const DAIMON_V5_ENGINE_DESCRIPTORS: {
+    readonly agy: {
+        readonly auth: {
+            readonly busEnvironment: "DBUS_SESSION_BUS_ADDRESS";
+            readonly format: null;
+            readonly method: null;
+            readonly provider: null;
+            readonly realm: {
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/agy-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxUnlockBytes: 4096;
+                readonly unlockMountPath: "/var/lib/spawnfile/daimon/agy-unlock-secret";
+                readonly unlockSourceSlot: "agy-unlock-secret";
+            };
+            readonly staging: "secret-service";
+        };
+        readonly authKinds: readonly ["subscription"];
+        readonly broker: null;
+        readonly capabilities: {
+            readonly broker: false;
+            readonly nativeSandbox: false;
+            readonly portableCredential: false;
+            readonly secretService: true;
+        };
+        readonly credentialMaterial: null;
+        readonly homeDirectory: "";
+        readonly homeEnvironment: "ANTIGRAVITY_CLI_HOME";
+        readonly id: "agy";
+        readonly modelSelection: {
+            readonly configurable: false;
+            readonly declarationRequiresBroker: false;
+            readonly defaults: {
+                readonly model: null;
+                readonly reasoningEffort: null;
+            };
+            readonly models: null;
+            readonly reasoningEfforts: readonly [];
+            readonly requiresPairedDeclaration: false;
+        };
+        readonly requiredBinaries: readonly ["agy", "dbus-daemon", "gnome-keyring-daemon"];
+        readonly sandbox: {
+            readonly configurable: false;
+        };
+        readonly training: {
+            readonly inferenceGrants: null;
+            readonly subject: {
+                readonly isolation: null;
+                readonly reason: "no verified per-agent sandbox";
+                readonly supported: false;
+            };
+        };
+    };
+    readonly codex: {
+        readonly auth: {
+            readonly directoryMode: 448;
+            readonly fileMode: 384;
+            readonly fileName: "auth.json";
+            readonly format: {
+                readonly accessTokenKeys: readonly ["access_token", "accessToken", "token"];
+                readonly containerKey: "tokens";
+                readonly fallbackToRoot: true;
+                readonly refreshTokenKeys: readonly ["refresh_token", "refreshToken"];
+            };
+            readonly maxCredentialBytes: 65536;
+            readonly method: "codex";
+            readonly provider: "openai";
+            readonly realm: null;
+            readonly staging: "portable-file";
+        };
+        readonly authKinds: readonly ["subscription"];
+        readonly broker: null;
+        readonly capabilities: {
+            readonly broker: false;
+            readonly nativeSandbox: true;
+            readonly portableCredential: true;
+            readonly secretService: false;
+        };
+        readonly credentialMaterial: {
+            readonly destinationRelativePath: ".codex/auth.json";
+            readonly directoryMode: 448;
+            readonly fileMode: 384;
+            readonly sourceRelativePath: ".daimon-inbound/codex-auth";
+            readonly sourceSlot: "codex-auth";
+        };
+        readonly homeDirectory: ".codex";
+        readonly homeEnvironment: "CODEX_HOME";
+        readonly id: "codex";
+        readonly modelSelection: {
+            readonly configurable: true;
+            readonly declarationRequiresBroker: false;
+            readonly defaults: {
+                readonly model: null;
+                readonly reasoningEffort: null;
+            };
+            readonly models: {
+                readonly kind: "non-empty-string";
+            };
+            readonly reasoningEfforts: readonly ["none", "minimal", "low", "medium", "high", "xhigh", "max", "ultra", "persistent"];
+            readonly requiresPairedDeclaration: false;
+        };
+        readonly piAuthMethod: "codex";
+        readonly piProvider: "openai-codex";
+        readonly piSourceProvider: "openai";
+        readonly requiredBinaries: readonly ["codex"];
+        readonly sandbox: {
+            readonly configurable: true;
+            readonly policy: {
+                readonly mode: "workspace-write";
+                readonly networkAccess: false;
+                readonly webSearch: "disabled";
+            };
+        };
+        readonly training: {
+            readonly inferenceGrants: null;
+            readonly subject: {
+                readonly isolation: "native-sandbox";
+                readonly supported: true;
+            };
+        };
+    };
+    readonly grok: {
+        readonly auth: {
+            readonly directoryMode: 448;
+            readonly fileMode: 384;
+            readonly fileName: "auth.json";
+            readonly format: {
+                readonly accessTokenKeys: readonly ["key"];
+                readonly entryKeyPattern: "^https://auth\\.x\\.ai::";
+                readonly expiresAtKey: "expires_at";
+                readonly refreshTokenKeys: readonly ["refresh_token"];
+            };
+            readonly maxCredentialBytes: 65536;
+            readonly method: "grok";
+            readonly provider: "xai";
+            readonly realm: {
+                readonly agentCredentialRelativePath: ".grok/auth.json";
+                readonly bootstrapMountPath: "/var/lib/spawnfile/daimon/grok-bootstrap-auth";
+                readonly bootstrapSourceSlot: "grok-auth";
+                readonly directoryMode: 448;
+                readonly durableMountPath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+                readonly fileMode: 384;
+                readonly maxCredentialBytes: 65536;
+            };
+            readonly staging: "broker-realm";
+        };
+        readonly authKinds: readonly ["subscription"];
+        readonly broker: {
+            readonly artifacts: {
+                readonly arm64Sha256: "d0dc1c03197c3e90f09b66ad7c89b4f7b448d06dc84c03b247dce976d6018d6e";
+                readonly sourceSha256: "15836d7ad69f12ef581a6e5b8635c9db43b2177dac609160c0749d3d1fefbaa8";
+                readonly x64Sha256: "95aa9c272225e74ff9f45f54dde4bc30aee324e9ba24d8a876db9151c81b454d";
+            };
+            readonly backendSocketPath: "/run/daimon-engine-broker/backend.sock";
+            readonly bounds: {
+                readonly capabilityBundleBytes: 8196;
+                readonly capabilityBytes: 4096;
+                readonly outputBytes: 262144;
+                readonly promptBytes: 65536;
+            };
+            readonly controlProtocolVersion: "noopolis.daimon.engine-broker.v4";
+            readonly controlSocketPath: "/run/daimon-engine-broker/control.sock";
+            readonly credentialHomePath: "/var/lib/spawnfile/daimon/grok-subscription-realm";
+            readonly grokCliArtifacts: {
+                readonly arm64: {
+                    readonly bytes: 136090504;
+                    readonly sha256: "39ab87666877d64ef3a40aa60fbe0c3b6a6acd7001b78fe60e2c76bb6cfc4a94";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-aarch64";
+                };
+                readonly x64: {
+                    readonly bytes: 163035648;
+                    readonly sha256: "be5905e107d2b8b5f3c142d21ecfe4c8fd32a913d2fd551b788707930c4dc80d";
+                    readonly url: "https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-1.0.34-linux-x86_64";
+                };
+            };
+            readonly grokCliBuild: "3736acbc8658";
+            readonly grokCliVersion: "1.0.34";
+            readonly grokExecutablePath: "/usr/local/bin/grok";
+            readonly identities: {
+                readonly brokerUid: 2100;
+                readonly firstWorkerUid: 2200;
+                readonly organizationUid: 2000;
+            };
+            readonly inferenceGrants: {
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            };
+            readonly launcherSocketPath: "/run/daimon-engine-broker/launcher.sock";
+            readonly mcpFacade: {
+                readonly host: "127.0.0.1";
+                readonly path: "/mcp";
+                readonly port: 43124;
+            };
+            readonly nativeAbiVersion: 2;
+            readonly nativeExecutablePath: "/opt/daimon/bin/daimon-engine-broker";
+            readonly projectionVersion: "noopolis.daimon.grok-broker-projection.v3";
+            readonly providerProxy: {
+                readonly host: "127.0.0.1";
+                readonly port: 43123;
+            };
+            readonly registrationPath: "/etc/daimon-engine-broker/registrations.bin";
+            readonly runRequestBudget: {
+                readonly countsCredentialRetries: true;
+                readonly fileName: "run-requests.json";
+                readonly includesInferenceGrants: true;
+                readonly maximumField: "maxRunRequests";
+                readonly storeField: "runRequestStore";
+            };
+            readonly serviceConfigPath: "/etc/daimon-engine-broker/service.json";
+            readonly serviceConfigVersions: readonly ["noopolis.daimon.engine-broker-service.v1", "noopolis.daimon.engine-broker-service.v2", "noopolis.daimon.engine-broker-service.v3"];
+            readonly slotPreflightVersion: "noopolis.daimon.grok-slot-preflight.v2";
+            readonly slotRouting: {
+                readonly controlCaller: "organization";
+                readonly key: "slot";
+                readonly repeatedAgentIds: true;
+                readonly resetRequest: "reset_slot";
+                readonly resetResponse: "slot_reset";
+                readonly slotEnvironment: "DAIMON_ENGINE_BROKER_SLOT";
+                readonly turnStoreDirectory: "slot-{slot}";
+                readonly workersMayControl: false;
+            };
+            readonly turnLimits: {
+                readonly bounds: {
+                    readonly maxRequests: readonly [1, 48];
+                    readonly maxTokens: readonly [1, 10000000];
+                    readonly timeoutMs: readonly [1000, 3600000];
+                };
+                readonly keys: readonly ["maxRequests", "maxTokens", "timeoutMs"];
+                readonly limitReasons: readonly ["tokens", "requests", "timeout", "none"];
+                readonly maxInFlightRequests: 1;
+                readonly missingUsageEstimate: {
+                    readonly inputBytesPerToken: 2;
+                    readonly outputTokens: 4096;
+                };
+                readonly requestUsageMaxTokens: 500000;
+                readonly tokenCeilingOvershoot: "at-most-one-request";
+                readonly v1Defaults: {
+                    readonly maxRequests: 32;
+                    readonly maxTokens: 300000;
+                    readonly timeoutMs: 240000;
+                };
+                readonly wakeMayOnlyLower: true;
+            };
+            readonly turnRecordVersions: readonly ["noopolis.daimon.engine-broker-turn.v1", "noopolis.daimon.engine-broker-turn.v2"];
+            readonly turnStorePath: "/var/lib/spawnfile/daimon/grok-subscription-realm/turns";
+            readonly wakeLimitEnvironment: {
+                readonly maxTokens: "DAIMON_ENGINE_WAKE_TOKEN_CEILING";
+                readonly timeoutMs: "DAIMON_ENGINE_WAKE_TIMEOUT_MS";
+            };
+            readonly worker: {
+                readonly clockedConfigSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "907d8967960c342b442d6d256b2585f3c85bd846a78578f596f0b605403d6d34";
+                        readonly low: "3c4f3515b21c1bffb3fb770e2ecb4b918b6c43d5e77c1fd47e1e6698d1fedee7";
+                        readonly medium: "9117e12b2f3f6fa045799592969cbaae1c2f3b1ea79330badac8655b9b41dd7a";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "203744f6f0dfc0bc80cfb896880497edfd9b3de4dcf33060e8ef4d2ef5f220a7";
+                        readonly low: "751f1dcd04983e5e5883df5a8fefa04f201e187e5ef1f344d3bf83f950830432";
+                        readonly medium: "f1406f93a8091eb0c09e07321254a9c783a89b0bbf5548d9613d53a8d087a517";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "6efddadc82c38020d3351829e54bb09fa456cd6d76ea1247902794d82a4a3ffa";
+                        readonly low: "a8c63ba910623a0686930c27db0733f4a2588c7fca9dd7da25c3f18027720ab5";
+                        readonly medium: "6afcd2b90c0d19794f8c0d22147a0f011946a92e613f89dae98b0ca729313101";
+                    };
+                };
+                readonly configSha256: {
+                    readonly "grok-4.5": {
+                        readonly high: "c63c3387ce92d94ec3f690abfe98942afcd7c9e17ff84816bbe751f340ab251f";
+                        readonly low: "8247127c3625ff7c5d8d527a53596b89ec6557a821ac46cfd00bd122b90daff6";
+                        readonly medium: "59288cee61297bb8c002097061a48f77b09d310754187a253ee089f7172a9155";
+                    };
+                    readonly "grok-4.6": {
+                        readonly high: "65b0212564fb74042b1503d293fb8d3620276033264c0efade2a539ca09218e3";
+                        readonly low: "ab58499ac32678097c146479896f2b8a8e2b0e39aea22dc0a60b6227e370538e";
+                        readonly medium: "df1a5cc84346e7f6bf6090492fbd19faaefb42953e3bb2e8c6cbc0572242403f";
+                    };
+                    readonly "grok-build": {
+                        readonly high: "a23724e00d670caee185ba7690d2daa868173e53905cf446f5329666f01ab4e3";
+                        readonly low: "fb343f2809903f26d21681470943235031f946e99085542fd89555eb7782cbb5";
+                        readonly medium: "8a587ef75c90eab70d19b24583e60051d6fba9d90c558839fdbb15588b4cc656";
+                    };
+                };
+                readonly defaultModel: "grok-4.6";
+                readonly defaultReasoningEffort: "low";
+                readonly home: {
+                    readonly directory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly uid: 0;
+                    };
+                    readonly organizationRuntimeHome: {
+                        readonly group: "worker";
+                        readonly mode: 456;
+                        readonly owner: "organization";
+                    };
+                    readonly privateTmp: {
+                        readonly mode: 448;
+                        readonly owner: "worker";
+                        readonly relativeToWorkerHome: "tmp";
+                    };
+                    readonly readOnlyFiles: {
+                        readonly gid: 0;
+                        readonly mode: 292;
+                        readonly names: readonly ["config.toml", "managed_config.toml", "requirements.toml", "sandbox.toml", "trusted_folders.toml"];
+                        readonly uid: 0;
+                    };
+                    readonly sandboxEvents: {
+                        readonly group: "broker";
+                        readonly mode: 416;
+                        readonly owner: "worker";
+                        readonly relativePath: "sessions/sandbox-events.jsonl";
+                    };
+                    readonly sessionsDirectory: {
+                        readonly group: "worker";
+                        readonly mode: 1017;
+                        readonly relativePath: "sessions";
+                        readonly uid: 0;
+                    };
+                    readonly sharedTmp: {
+                        readonly maxGroupExclusive: 2200;
+                        readonly mode: 1020;
+                        readonly otherMode: 4;
+                        readonly paths: readonly ["/tmp", "/var/tmp"];
+                        readonly uid: 0;
+                    };
+                    readonly spillDirectory: {
+                        readonly fileMode: 416;
+                        readonly group: "worker";
+                        readonly mode: 1512;
+                        readonly owner: "organization";
+                        readonly relativeToRuntimeHome: "tool-output";
+                    };
+                };
+                readonly maxTurns: 48;
+                readonly modelId: "daimon-broker-grok";
+                readonly models: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+                readonly reasoningEfforts: readonly ["low", "medium", "high"];
+                readonly systemPromptSha256: "2c31c0085a54a4efbf9c0cf0b8124c56e47f38691b7f0c7fa233a74abaa8ddf8";
+                readonly taskClock: {
+                    readonly directoryMode: 493;
+                    readonly directoryPath: "/run/daimon-engine-broker/task-clock/slot-0";
+                    readonly fileMode: 420;
+                    readonly ownerUid: 2100;
+                    readonly preloadPath: "/usr/local/lib/daimon/libfaketime.so.1";
+                    readonly rootDirectoryPath: "/run/daimon-engine-broker/task-clock";
+                    readonly slotDirectoryPattern: "/run/daimon-engine-broker/task-clock/slot-{slot}";
+                    readonly slotFilePattern: "/run/daimon-engine-broker/task-clock/slot-{slot}/faketime";
+                    readonly timestampFilePath: "/run/daimon-engine-broker/task-clock/slot-0/faketime";
+                    readonly version: "noopolis.daimon.grok-broker-task-clock.v2";
+                    readonly workerView: "own-directory-visible-sibling-directories-denied";
+                };
+                readonly toolIds: readonly ["run_terminal_cmd", "read_file", "grep", "list_dir", "search_tool", "use_tool"];
+                readonly visibleTools: readonly ["grep", "list_dir", "read_file", "run_terminal_command", "search_tool", "use_tool"];
+            };
+        };
+        readonly capabilities: {
+            readonly broker: true;
+            readonly nativeSandbox: true;
+            readonly portableCredential: true;
+            readonly secretService: false;
+        };
+        readonly credentialMaterial: {
+            readonly destinationRelativePath: ".grok/auth.json";
+        };
+        readonly homeDirectory: ".grok";
+        readonly homeEnvironment: "GROK_HOME";
+        readonly id: "grok";
+        readonly modelSelection: {
+            readonly configurable: true;
+            readonly declarationRequiresBroker: true;
+            readonly defaults: {
+                readonly model: "grok-4.6";
+                readonly reasoningEffort: "low";
+            };
+            readonly models: {
+                readonly kind: "enum";
+                readonly values: readonly ["grok-4.6", "grok-4.5", "grok-build"];
+            };
+            readonly reasoningEfforts: readonly ["low", "medium", "high"];
+            readonly requiresPairedDeclaration: true;
+        };
+        readonly requiredBinaries: readonly ["grok", "daimon-engine-broker"];
+        readonly sandbox: {
+            readonly baseProfile: "strict";
+            readonly configurable: false;
+            readonly denyPaths: {
+                readonly canonicalAbsolute: true;
+                readonly forbiddenCharacterPattern: "[\"\\\\\\u0000-\\u001f\\u007f*?[\\]]";
+                readonly rootAllowed: false;
+                readonly trailingSlashAllowed: false;
+            };
+            readonly profile: "daimon-strict";
+            readonly restrictNetwork: true;
+        };
+        readonly training: {
+            readonly inferenceGrants: {
+                readonly bodyMembers: readonly ["messages", "model", "reasoning_effort", "response_format", "stream", "stream_options"];
+                readonly client: {
+                    readonly configSha256: {
+                        readonly "grok-4.5": {
+                            readonly high: "ffbc33728b821e9854fbc7c93601e599225da421ecfd6ebf10d314afcc28d6f2";
+                            readonly low: "a07f7436f1268bb399ec233c65d3b3d8fb99a11a1f175f8da1ca133c9367bc74";
+                            readonly medium: "1f4c0d4dad1f3b09419b5739db6423a09e0049abc091594c64123a75dd53dfb9";
+                        };
+                        readonly "grok-4.6": {
+                            readonly high: "5652656effa82f0c4f09cf8226b16e6140332a5a358b571194bb5563312367ac";
+                            readonly low: "79314d039f787e4ebfec7dacf57adc969086b948f564dec008f0ed6367e6062f";
+                            readonly medium: "6f538de0547c0c4e6a3f04ae08595ceadadabb06b75f6b6ee4c428744bb95cd8";
+                        };
+                        readonly "grok-build": {
+                            readonly high: "98d16f2b7d12f4eb540d625c853e51d227933e204923e43e8b9b4176f10aca2c";
+                            readonly low: "ca15c6a562a008227d39c51d3a3a83715663089b3784e8b46debb1fb67b3c4a1";
+                            readonly medium: "01783fb6beadcf6f8486fff0836820ad43fab5662b812a907fe9cfdb83e9804d";
+                        };
+                    };
+                    readonly envKey: "DAIMON_INFERENCE_GRANT";
+                    readonly modelId: "daimon-inference-grok";
+                };
+                readonly failureCodes: readonly ["auth_stale", "grant_limit", "invalid_request", "unavailable"];
+                readonly ledgerDedupeKey: readonly ["grant", "request"];
+                readonly ledgerVersion: "noopolis.daimon.inference-usage.v1";
+                readonly limits: {
+                    readonly maxRequests: 64;
+                    readonly maxTokens: 2000000;
+                };
+                readonly maxInFlightRequestsPerGrant: 1;
+                readonly maxLiveGrants: 8;
+                readonly messageRoles: readonly ["system", "user", "assistant"];
+                readonly purposes: readonly ["judge", "optimizer"];
+                readonly requestKinds: readonly ["request_inference_grant", "release_inference_grant"];
+                readonly tokenPrefix: "inference_";
+                readonly ttlMs: 600000;
+            };
+            readonly subject: {
+                readonly isolation: "broker-worker";
+                readonly supported: true;
+            };
+        };
+    };
+};